Static task
static1
Behavioral task
behavioral1
Sample
b6f84f49c1520af0ac33e463e971a8b8cff50fe9d28e6e67e770709e00f1f251.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6f84f49c1520af0ac33e463e971a8b8cff50fe9d28e6e67e770709e00f1f251.exe
Resource
win10v2004-20220812-en
General
-
Target
b6f84f49c1520af0ac33e463e971a8b8cff50fe9d28e6e67e770709e00f1f251
-
Size
281KB
-
MD5
446f8bcad7cac827b481de667d13bc00
-
SHA1
738655a87f106533be3298916dcac11b9bd7b214
-
SHA256
b6f84f49c1520af0ac33e463e971a8b8cff50fe9d28e6e67e770709e00f1f251
-
SHA512
1397a715f9402ebcdae9cc700dacd136c91e4e736c58da74a94dd6ca5df04b943269032036ca132e2572fd105a1a5533bff9109f241a657d89544785b6ed4a35
-
SSDEEP
6144:hCSZsDWddorJUDGCFB22uaHzW/nYo54HTbGPw1IN8/PhwTMC:IesDKo+82uaToY1HTCBSwT5
Malware Config
Signatures
Files
-
b6f84f49c1520af0ac33e463e971a8b8cff50fe9d28e6e67e770709e00f1f251.exe windows x86
ef7db70153b89aa135a84fc4405bd5f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__dllonexit
_purecall
_CxxThrowException
_ftol
memmove
free
_initterm
memset
_errno
strchr
malloc
_adjust_fdiv
memcpy
strcmp
??1type_info@@UAE@XZ
_onexit
strlen
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
ntdll
NtSetVolumeInformationFile
NtQueryObject
NtReleaseSemaphore
NtQueryQuotaInformationFile
NtGetPlugPlayEvent
NtQueryMultipleValueKey
NtDeleteKey
NtSetQuotaInformationFile
NtOpenProcessToken
NtQueryIoCompletion
NtQueryVolumeInformationFile
kernel32
InitializeCriticalSection
OpenMutexW
GetConsoleCP
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentDirectoryA
InterlockedDecrement
CreateMutexW
OpenEventA
GetProcessHeap
FindResourceExW
GetACP
CloseHandle
GetComputerNameExW
GetThreadLocale
OpenSemaphoreA
OpenSemaphoreW
LocalFree
GetLastError
TlsSetValue
GetSystemDefaultLangID
DisableThreadLibraryCalls
DeleteFileA
GetVersion
GetSystemDefaultLCID
GetVolumeInformationW
lstrcpynW
GetSystemDefaultUILanguage
FindResourceW
WriteFile
CreateFileW
GetUserDefaultUILanguage
FindNextFileA
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
AreFileApisANSI
LCMapStringW
lstrlenW
InterlockedIncrement
GetSystemTime
InterlockedExchange
GlobalFree
CreateMutexA
HeapAlloc
SetFileAttributesW
InterlockedCompareExchange
GetModuleHandleA
IsSystemResumeAutomatic
GetFileAttributesW
GlobalAlloc
FreeEnvironmentStringsA
lstrcpyW
CreateEventA
lstrcmpiW
SetEvent
CreateThread
LoadLibraryA
CreateEventW
CreateSemaphoreW
GetEnvironmentStringsA
FindAtomA
ReleaseSemaphore
AddAtomA
LocalAlloc
CreateSemaphoreA
GlobalMemoryStatusEx
ReadFile
QueryPerformanceCounter
GetModuleHandleW
GetTickCount
PulseEvent
GetCurrentThreadId
GetCurrentProcessId
GetProcessHeaps
Sleep
GetSystemTimeAsFileTime
TerminateProcess
VirtualAlloc
GetCurrentProcess
GetOEMCP
HeapCreate
UnhandledExceptionFilter
TlsAlloc
SetUnhandledExceptionFilter
FindClose
OpenMutexA
GetDriveTypeW
GetLogicalDriveStringsW
GetStdHandle
lstrcmpW
MultiByteToWideChar
ReleaseMutex
ExpandEnvironmentStringsW
GetLocaleInfoW
FreeLibrary
TlsGetValue
GetProcAddress
GetConsoleAliasExesLengthA
GetUserDefaultLCID
GetCommandLineA
FindResourceExA
FindResourceA
GetVersionExA
LoadLibraryW
HeapDestroy
GetStartupInfoA
WaitForSingleObject
GetUserDefaultLangID
SystemTimeToFileTime
FormatMessageW
user32
DispatchMessageW
CharNextW
GetDesktopWindow
PostThreadMessageW
SendMessageA
GetClipboardViewer
LoadStringW
GetProcessDefaultLayout
GetClipboardOwner
GetInputState
ShowWindow
GetCaretBlinkTime
EnumWindows
FindWindowExA
GetMessageA
TranslateMessage
LoadBitmapA
LoadMenuA
PostQuitMessage
GetActiveWindow
wsprintfW
UpdateWindow
GetDoubleClickTime
PeekMessageW
CreateWindowExA
CountClipboardFormats
GetCapture
GetForegroundWindow
FindWindowA
MsgWaitForMultipleObjects
advapi32
RegOpenKeyExA
GetLengthSid
IsValidSid
ConvertStringSidToSidW
ConvertSidToStringSidW
EqualSid
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
CopySid
RegEnumKeyExA
LookupAccountNameW
LookupAccountSidW
RegQueryValueExA
ReportEventW
DeregisterEventSource
RegisterEventSourceW
RegOpenKeyExW
RegSetValueExW
netapi32
NetUserGetInfo
NetGetDCName
NetApiBufferFree
ole32
CoCreateGuid
CoUninitialize
CoInitializeEx
CoCreateInstance
secur32
TranslateNameW
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 191KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ